This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30438/jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa
File:                     jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa (raw, json)
Hash identifier:          vFA2FoseJGbAi/rbPScaYFrLHhBQuQJ5Ey0W6Z8X3/s=
Subject key identifier:   8D:AA:B7:34:AF:EF:E5:EF:16:D0:96:BB:46:61:68:5E:DE:17:76:33
Certificate issuer:       /CN=BF791915BC4356AAB7A6EFCD6393E1930B502728
Certificate serial:       17
Authority key identifier: BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa
Signing time:             Sun 25 Jan 2026 20:43:43 +0000
ROA not before:           Sun 25 Jan 2026 20:43:43 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     152860
IP address blocks:        2401:a920::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Feb 2026 11:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF791915BC4356AAB7A6EFCD6393E1930B502728
        Validity
            Not Before: Jan 25 20:43:43 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=8DAAB734AFEFE5EF16D096BB4661685EDE177633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:84:c4:9f:98:b3:46:00:1c:d4:24:69:b5:
                    bc:bb:b5:42:eb:22:9d:3e:d1:8d:39:d8:e6:e7:52:
                    6d:cd:54:6b:16:9a:3a:be:80:d8:fc:75:55:aa:6e:
                    12:ce:25:0c:bf:7d:3e:ca:90:38:00:6f:67:ff:76:
                    93:ed:74:b6:72:8f:42:a9:6f:66:bb:b3:3f:34:21:
                    35:93:71:48:42:37:a1:52:c9:df:86:7d:30:65:9d:
                    b8:74:fa:92:cd:79:e8:38:cf:97:fa:38:60:c5:f0:
                    55:da:4b:74:8e:77:84:ec:42:aa:e7:50:e5:a9:b4:
                    18:9b:b1:c7:19:fc:c9:b6:b0:63:29:64:89:8a:c2:
                    66:6c:0f:e1:8c:70:d9:f6:f6:c6:43:02:5a:dc:ae:
                    bf:83:65:fd:4e:c4:1d:36:4e:f5:e0:89:46:b1:1c:
                    e6:b4:ce:b4:23:40:20:b9:ad:46:17:42:c2:49:a9:
                    fa:a7:1c:68:b3:09:8e:e6:b0:bd:ba:c3:a1:40:37:
                    c3:45:1f:d7:de:09:96:be:70:a2:d0:e8:82:5a:59:
                    c2:84:7c:95:17:9a:97:4b:07:e4:5a:9d:42:4f:ff:
                    05:fc:c3:ec:d4:ac:86:c1:53:66:3f:e2:da:b1:1d:
                    e4:98:38:30:19:4e:d3:9a:aa:36:3a:64:24:13:4d:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AA:B7:34:AF:EF:E5:EF:16:D0:96:BB:46:61:68:5E:DE:17:76:33
            X509v3 Authority Key Identifier:
                keyid:BF:79:19:15:BC:43:56:AA:B7:A6:EF:CD:63:93:E1:93:0B:50:27:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/v3kZFbxDVqq3pu_NY5PhkwtQJyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/v3kZFbxDVqq3pu_NY5PhkwtQJyg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30438/jaq3NK_v5e8W0Ja7RmFoXt4XdjM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a920::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:e0:84:55:ee:cf:05:bb:89:34:d4:32:bb:a5:b8:e8:34:
         10:26:0a:26:54:56:dc:be:81:11:9a:64:15:25:7b:f4:67:b4:
         10:dd:6b:06:71:a5:a6:3b:d7:4d:2d:8c:b9:74:2f:91:a2:71:
         6b:c2:63:63:f0:ab:f6:00:ba:55:d7:8e:9a:ad:9b:de:0a:e7:
         eb:ef:00:d1:6a:e6:5b:ff:be:3a:82:38:7a:b9:42:be:30:e1:
         25:ea:0e:9e:da:26:aa:c9:63:fc:4b:ea:44:2b:6d:22:4b:78:
         af:5a:23:16:d9:40:93:f8:15:73:65:16:0a:ae:73:f0:d6:e6:
         09:2b:4e:5f:a8:c7:cf:ce:a6:0e:eb:d3:00:75:a6:39:00:9b:
         3f:34:11:4e:18:b5:61:6b:00:50:2b:b9:f2:71:2e:f7:f1:b4:
         16:f7:fc:b5:8c:2d:48:a4:3a:ca:69:b1:22:1a:d7:55:22:f6:
         8b:98:37:34:50:6d:66:0a:27:0b:69:30:57:cd:10:4b:84:d6:
         35:06:7e:6b:df:0e:6d:a1:9b:1e:dc:df:28:ca:b3:49:5f:7a:
         11:de:9c:45:59:91:04:73:f6:32:9e:6a:bd:66:18:93:b9:a0:
         0e:2a:01:65:14:9d:cb:e3:56:0d:fc:ea:ce:a6:9b:90:35:2c:
         ab:16:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 13:47:31 2026 by rpki-client